基于蜜罐的主动防御应用研究

杨德全; 刘卫民; 俞宙

doi:10.11959/j.issn.2096-109x.2018006

您当前的位置：

首页 >

文章列表页 >

基于蜜罐的主动防御应用研究

学术论文 | 更新时间：2024-06-03

- 基于蜜罐的主动防御应用研究
- Research on active defense application based on honeypot
- 网络与信息安全学报 2018年4卷第1期页码：57-62
- 作者机构：
- 作者简介：
  
  [ "杨德全（1980-），男，山西应县人，博士，北京理工大学助理研究员，主要研究方向为网络应用安全、安全审计。" ]
  [ "刘卫民（1976-），男，山西太原人，北京理工大学工程师，主要研究方向为计算机网络和无线网络。" ]
  [ "俞宙（1969-），男，浙江兰溪人，北京理工大学副研究员，主要研究方向为网络与信息安全。" ]
- 基金信息：
  
  国家重点研究计划基金资助项目;The National Key Research and Development Program of China(2017YFF0207400)
- DOI：10.11959/j.issn.2096-109x.2018006
  中图分类号： TP393
- 网络首发：2018-01，
  
  纸质出版：2018-01-15
- 稿件说明：
移动端阅览
杨德全, 刘卫民, 俞宙. 基于蜜罐的主动防御应用研究[J]. 网络与信息安全学报, 2018,4(1):57-62.

Dequan YANG, Weimin LIU, Zhou YU. Research on active defense application based on honeypot[J]. Chinese Journal of Network and Information Security, 2018, 4(1): 57-62.
杨德全, 刘卫民, 俞宙. 基于蜜罐的主动防御应用研究[J]. 网络与信息安全学报, 2018,4(1):57-62. DOI： 10.11959/j.issn.2096-109x.2018006.

Dequan YANG, Weimin LIU, Zhou YU. Research on active defense application based on honeypot[J]. Chinese Journal of Network and Information Security, 2018, 4(1): 57-62. DOI： 10.11959/j.issn.2096-109x.2018006.

摘要

随着金融信息化的蓬勃发展，针对金融系统的网络攻击事件也大量增长。主动防御对提高专用网络的防御水平有着重要的作用。如何快速有效的部署和应用蜜罐捕获攻击行为，分析攻击意图，提高攻击门槛是保障专网安全的关键所在。本文从主动防御的角度出发，分析了蜜罐的主动防御优势，设计了将主动防御和被动防御整合的防御生态链，并在专网内建立了蜜罐实验环境，结果表明，主动防御技术可以有效提高攻击者的攻击门槛，从而提高整体网络的安全等级。

Abstract

Abstract：With the rapid development of financial information technology

cyber security events on the financial system have also increased greatly.Active defense plays an important role in improving the defense level of defined private network.How to quickly and effectively deploy and apply honeypot to capture and attack behavior

analyze the attack intention and raise the threshold of attack is the key to ensure the security of the defined private network.From the perspective of active defense

the advantage of honeypot active defense was analyzed

an active defense and defense filling passive defense integration was designed

and a honeypot within private network experimental environment was set up

the results show that the active defense technology can effectively improve the threshold of the attacker's attack

so as to improve the security level of the whole network.

关键词

Keywords

references

石乐义 , 姜蓝蓝 , 贾春福 , 等 . 蜜罐诱骗防御机理的博弈理论分析 [J ] . 电子与信息学报 , 2012 , 34 ( 6 ): 1420 - 1424 .

SHI L Y , JIANG L L JIA C F , et al . A game theoretic analysis for the honeypot deceptive mechanism [J ] . Journal of Electronics ＆Information Technology , 2012 , 34 ( 6 ): 1420 - 1424 .

诸葛建伟 , 唐勇 , 韩心慧 , 等 . 蜜罐技术研究与应用进展 [J ] . 软件学报 , 2013 , 24 ( 4 ): 825 - 842 .

ZHUGE J W , TANG Y , HAN X H , et al . Honeypot technology research and application [J ] . Journal of Software , 2013 , 24 ( 4 ): 825 - 842 .

NASIR Q AL-MOUSA Z A . Honeypots aiding network forensics:challenges and notions [J ] . Journal of Communications , 2013 , 8 ( 11 ): 53 - 84 .

PHAM V H , DACIER M . Honeypot trace forensics:The observation viewpoint matters [J ] . Future Generation Computer Systems-The International Journal Of Escience , 2011 , 27 ( 5 ): 539 - 546 .

MARCHESE M , SURLINELLI R , ZAPPATORE S . Monitoring unauthorized internet accesses through a 'honeypot' system [J ] . International Journal Of Communication Systems , 2011 , 24 ( 1 ): 75 - 93 .

YANG H S . A study on attack information collection using virtualization technology [J ] . Multimedia Tools and Applications , 2015 , 74 ( 20 ): 8791 - 8799 .

郭军权 , 诸葛建伟 , 孙东红 , 等 . Spampot:基于分布式蜜罐的垃圾邮件捕获系统 [J ] . 计算机研究与发展 , 2014 , 51 ( 5 ): 1071 - 1080 .

GUO J Q , ZHUGE J W , SUN D H , et al . Spampot:A spam capture systems based on distributed honeypot [J ] . Journal of Computer Research and Development , 2014 , 51 ( 5 ): 1071 - 1080 .

ZHAN Z X , XU M C , XU S H . Characterizing honeypot-captured cyber attacks:statistical framework and case study [J ] . Transactions on Information Forensics and Security , 2013 , 8 ( 11 ): 1775 - 1789 .

WANG K , DU M , MAHARJAN S , et al . Strategic honeypot game model for distributed denial of service attacks in the smart grid [J ] . Transactions on Smart Grid , 2017 , 8 ( 5 ): 2474 - 2482 .

LA Q D , QUEK T , LEE J , et al . Deceptive attack and defense game in honeypot-enabled networks for the internet of things [J ] . Internet of Things Journal , 2016 , 3 ( 6 ): 1025 - 1035 .

AKIYAMA M , YAGI T , YADA T , et al . Analyzing the ecosystem of malicious URL redirection through longitudinal observation from honeypots [J ] . Computers ＆ Security , 2017 , 69 : 155 - 173 .

BABU M R , USHA G . A novel honeypot based detection and isolation approach (NHBADI) to detect and isolate black hole attacks in manet [J ] . Wireless Personal Communications , 2016 , 90 ( 2SI ): 831 - 845 .

SELVARAJ R , KUTHADI V M , MARWALA T . Ant-based distributed denial of service detection technique using roaming virtual honeypots [J ] . IET Communications , 2016 , 10 ( 8 ): 929 - 935 .

JIANG C B , LIU I H , CHUNG Y N , et al . Novel intrusion prediction mechanism based on honeypot log similarity [J ] . International Journal Of Network Management , 2016 , 26 ( 3 ): 156 - 175 .

ZHANG W Z , HE H , KIM T H . Xen-based virtual honeypot system for smart device [J ] . Multimedia Tools and Applications , 2015 , 74 ( 19 ): 8541 - 8558 .

GHOURABI A , ABBES T , BOUHOULA A . Characterization of attacks collected from the deployment of Web service honeypot [J ] . Security And Communication Networks , 2014 , 7 ( 2 ): 338 - 351 .

KIM H G , KIM D , CHO S J , et al . Efficient detection of malicious web pages using high-interaction client honeypots [J ] . Journal of Information Science and Engineering , 2012 , 28 ( 5 ): 911 - 924 .

浏览量

3463

下载量

CSCD

文章被引用时，请邮件提醒。

提交

工具集

关联资源

网络靶场研究现状与展望

工业互联网蜜网技术综述

容器云中基于信号博弈的容器迁移与蜜罐部署策略

基于时间压缩的流量加速回放方法

基于智能合约的高对抗性僵尸网络研究